KDC (Key Distribution Center) building/sending ticket-granting tickets clients accessing resources on servers forwardable tickets, sending proxy tickets, sending Kerberos accessing resources authenticated trusts in Active Directory authenticating users benefits provided for Active Directory configuring interoperability Microsoft implementation operational theory of pros and cons of protecting middle- tier applications proxy authentication 2nd realms supported by Windows Server 2003 for IPSec communication in Windows Server 2003 Kerberos Policies Key Distribution Center [See KDC] key recovery for private keys key-based cryptography keyed hashing security problems with keys perfect forward secrecy (PFS) 2nd protecting private keys without HSMs Syskey utility